#!/bin/sh # Copyright (C) 2014-2022 Daniel Baumann # # SPDX-License-Identifier: GPL-3.0+ # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . set -e PROJECT="open-infrastructure" SOFTWARE="compute-tools" PROGRAM="container" COMMAND="$(basename ${0})" HOOKS="/etc/${SOFTWARE}/hooks" Parameters () { GETOPT_LONGOPTIONS="name:,full-upgrade,interactive,autoremove,purge,yes," GETOPT_OPTIONS="n:,f,i,r,p,y," PARAMETERS="$(getopt --longoptions ${GETOPT_LONGOPTIONS} --name=${COMMAND} --options ${GETOPT_OPTIONS} --shell sh -- ${@})" if [ "${?}" != "0" ] then echo "'${COMMAND}': getopt exit" >&2 exit 1 fi eval set -- "${PARAMETERS}" while true do case "${1}" in -n|--name) NAME="${2}" shift 2 ;; -f|--full-upgrade) FULL_UPGRADE="true" shift 1 ;; -i|--interactive) INTERACTIVE="true" shift 1 ;; -r|--autoremove) AUTOREMOVE="true" shift 1 ;; -p|--purge) PURGE="--purge" shift 1 ;; -y|--yes) YES="-y" shift 1 ;; --) shift 1 break ;; *) echo "'${COMMAND}': getopt error" >&2 exit 1 ;; esac done } Usage () { echo "Usage: ${PROGRAM} ${COMMAND} -n|--name NAME [-f|--full-upgrade] [-i|--interactive] [-r|--autoremove] [-p|--purge] [-y|--yes]" >&2 echo echo "See ${COMMAND}(1), ${PROGRAM}(1) and ${PROJECT}(7) for more information." exit 1 } Parameters "${@}" if [ -z "${NAME}" ] then Usage fi Notification () { TYPE="${1}" NUMBER="${2}" PACKAGES="${3}" if [ -z "${PACKAGES}" ] then return fi CONTAINER_USER="${SUDO_USER:-${USER}}" DATE="$(date +%Y-%m-%d\ %H:%M:%S)" HOST="$(hostname -f 2> /dev/null || hostname)" # logfile echo "${DATE} ${HOST} ${CONTAINER_USER} ${NAME} ${NUMBER} ${TYPE}: ${PACKAGES}" >> "/var/log/${SOFTWARE}/${PROGRAM}.log" # irc if [ -e /usr/bin/irk ] then for FILE in "/etc/${SOFTWARE}/${PROGRAM}.conf" "/etc/${SOFTWARE}/${PROGRAM}.conf.d"/*.conf do if [ -e "${FILE}" ] then . "${FILE}" fi done if [ -n "${IRK_TARGETS}" ] then for TARGET in ${IRK_TARGETS} do irk "${TARGET}" "\x0300${CONTAINER_USER}\x03@\x0312${HOST}:\x03 \x0303${NAME}\x03 \x0307${NUMBER} ${TYPE}\x03: ${PACKAGES}" done fi fi } case "${NAME}" in ALL) NAMES="$(container list --started --format shell)" ;; *) NAMES="${NAME}" ;; esac # Pre hooks for FILE in "${HOOKS}/pre-${COMMAND}".* "${HOOKS}/${NAME}.pre-${COMMAND}" do if [ -x "${FILE}" ] then "${FILE}" fi done if [ $(echo ${NAMES} | wc -w) -gt 1 ] then NAME_LOOP="true" else NAME_LOOP="false" fi # Run for NAME in ${NAMES} do case "${INTERACTIVE}" in true) case "${NAME_LOOP}" in true) echo ;; esac echo -n "'${NAME}': update container '${NAME}' [y|N|a]? " read UPDATE UPDATE="$(echo ${UPDATE} | tr '[A-Z]' '[a-z]')" case "${UPDATE}" in a|all) INTERACTIVE="false" ;; y|yes) ;; *) case "${NAME_LOOP}" in true) continue ;; *) exit 1 ;; esac ;; esac ;; esac echo "################################################################################" echo "Updating ${NAME}" echo "################################################################################" container run -n ${NAME} -- "apt update" UPDATE_NUMBER="$(container run -n ${NAME} -- "apt \-\-simulate full-upgrade" | awk '/^[0-9]* upgraded, / { print $1 }')" case "${UPDATE_NUMBER}" in 0) ;; *) # usefull use of grep to de-colorize apt output UPDATE_PACKAGES="$(for PACKAGE in $(container run -n ${NAME} -- "apt list \-\-upgradable 2>/dev/null | grep '\/'" | awk -F/ '{ print $1 }'); do echo -n "${PACKAGE} "; done | sed -e 's| $||'; echo)" case "${FULL_UPGRADE}" in true) container run -n ${NAME} -- "DEBCONF_FRONTEND='noninteractive' DEBCONF_PRIORITY='critical' DEBCONF_NONINTERACTIVE_SEEN='true' DEBCONF_NOWARNINGS='true' apt \-o Dpkg::Options::=\-\-force-confold -f ${YES} full-upgrade" ;; *) container run -n ${NAME} -- "DEBCONF_FRONTEND='noninteractive' DEBCONF_PRIORITY='critical' DEBCONF_NONINTERACTIVE_SEEN='true' DEBCONF_NOWARNINGS='true' apt \-o Dpkg::Options::=\-\-force-confold -f ${YES} upgrade" ;; esac Notification "update(s)" "${UPDATE_NUMBER}" "${UPDATE_PACKAGES}" ;; esac case "${AUTOREMOVE}" in true) REMOVE_NUMBER="$(container run -n ${NAME} -- "apt \-\-simulate autoremove" | awk '/^[0-9]* upgraded, / { print $6 }')" case "${REMOVE_NUMBER}" in 0) ;; *) REMOVE_PACKAGES="$(for LINE in $(container run -n ${NAME} -- "apt \-\-simulate autoremove" | grep '^ '); do echo ${LINE}; done | sed -e 's|^ ||' -e 's| $||'; echo)" container run -n ${NAME} -- "apt ${YES} autoremove ${PURGE}" Notification "removal(s)" "${REMOVE_NUMBER}" "$(echo ${REMOVE_PACKAGES})" ;; esac ;; esac echo "'${NAME}': container updated." done # Post hooks for FILE in "${HOOKS}/post-${COMMAND}".* "${HOOKS}/${NAME}.post-${COMMAND}" do if [ -x "${FILE}" ] then "${FILE}" fi done